Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XE6md_dPHyPTk9BpHsoVMlK1vsY.roa
File: XE6md_dPHyPTk9BpHsoVMlK1vsY.roa (raw, json)
Hash identifier: jKyNAC1yEqXL9UV9Wu4ODQ6K504zGAIuhRFOYAsIF3Y=
Subject key identifier: 5C:4E:A6:77:F7:4F:1F:23:D3:93:D0:69:1E:CA:15:32:52:B5:BE:C6
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01953C2F39E92A65E3178DF8F1E92563DCB8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XE6md_dPHyPTk9BpHsoVMlK1vsY.roa
Signing time: Tue 25 Feb 2025 08:18:02 +0000
ROA not before: Tue 25 Feb 2025 08:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12887
IP address blocks: 84.40.156.0/22 maxlen: 22
84.40.218.0/23 maxlen: 23
195.128.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:2f:39:e9:2a:65:e3:17:8d:f8:f1:e9:25:63:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Feb 25 08:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4ea677f74f1f23d393d0691eca153252b5bec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:ed:d0:60:7e:98:c4:f7:08:43:b0:4a:cf:
10:b4:48:25:86:a9:9b:5d:2a:04:fe:2a:25:0c:e6:
5a:7e:22:c2:b1:8f:db:96:66:4a:10:f2:da:89:1c:
54:60:90:f8:58:c1:14:1b:36:4a:31:26:36:e6:df:
86:6d:30:31:b5:cf:ed:58:4c:d0:5e:a7:b8:45:f8:
c2:8c:d7:0a:c4:8e:73:08:b9:e1:4a:0b:d6:c8:77:
e5:0e:d5:d2:a0:c7:3e:9f:f5:40:6c:2d:c6:0a:e3:
ac:ab:2d:4c:56:54:79:4d:55:aa:44:ec:48:95:83:
cd:35:6a:c3:7c:93:8f:e3:77:79:91:63:51:51:57:
5e:a8:4c:82:51:7c:fb:d4:7a:f7:fa:02:f0:85:5a:
d4:d6:1b:be:9a:59:3e:c0:b3:3c:b6:f7:ab:94:20:
a7:b5:2b:b2:f7:21:09:2f:23:3d:71:bd:d3:df:8e:
6f:ac:ec:36:7d:be:9a:04:82:44:ff:36:6f:17:2d:
5d:1e:33:19:38:ed:86:b1:23:87:68:8f:1b:bb:aa:
d7:6a:d8:62:c7:9d:32:48:9f:3d:04:c7:76:e9:17:
6c:90:61:51:89:3f:f4:9f:eb:e7:f3:d2:99:20:c9:
71:cf:58:d7:7c:43:39:d5:ff:d6:61:d9:70:8c:db:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:A6:77:F7:4F:1F:23:D3:93:D0:69:1E:CA:15:32:52:B5:BE:C6
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XE6md_dPHyPTk9BpHsoVMlK1vsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.156.0/22
84.40.218.0/23
195.128.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f0:55:d6:98:9b:62:51:af:b0:b4:f8:64:dd:54:52:fd:54:
2b:b9:a3:f4:13:59:d1:98:49:2f:4f:cb:89:ae:d2:95:48:fd:
7a:e6:67:28:a7:4d:9f:11:cb:94:56:81:93:11:d1:23:80:5e:
54:f0:f0:8b:fe:d7:a0:5e:fb:ea:bd:0d:5b:7f:61:55:05:6f:
22:3a:9d:a3:b8:26:58:e2:61:59:9e:dc:fd:c5:b9:14:ad:cf:
e3:88:43:b3:36:21:71:1a:39:26:61:47:32:7f:c3:cb:fc:28:
ae:bd:37:fd:df:f8:47:86:56:02:55:09:6e:ec:50:48:8d:cd:
20:7a:d4:61:da:f9:38:c7:3f:d2:96:1e:9c:e4:7a:fe:85:67:
1f:08:cb:6e:f0:7a:f1:64:be:d6:d2:75:d0:7e:be:58:d9:5e:
8b:d3:62:64:77:ef:82:5c:38:22:44:00:41:41:84:e7:31:1b:
f4:6d:40:f5:40:04:b8:56:27:45:80:7c:6a:89:88:15:09:c5:
95:d8:bc:b2:d1:4e:17:94:d0:c1:fe:2b:a8:3c:ac:f0:f3:26:
27:ba:45:c8:42:2e:13:37:07:74:e6:ea:b1:02:30:c3:23:a5:
05:1a:d4:93:5c:dc:71:86:3f:be:1b:e8:70:b5:2c:f9:be:3e:
13:51:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:37 2025 by rpki-client